{\rtf1\ansi\deff0
{\fonttbl{\f0\fmodern\fcharset0\fprq1 Courier New;}}{\colortbl;\red0\green0\blue0;\red255\green0\blue0;\red0\green255\blue0;\red0\green0\blue255;\red255\green0\blue255;\red255\green0\blue0;\red128\green128\blue0;}\f0\fs18 
\plain\cf1\fs18 \par \plain\ul\b\cf4\fs18 Packet Info
\plain\cf1\fs18 \par   \plain\cf3\fs18 Packet Number:        \plain\cf1\fs18 41
\plain\cf1\fs18 \par   \plain\cf3\fs18 Flags:                \plain\cf1\fs18 0x00000000
\plain\cf1\fs18 \par   \plain\cf3\fs18 Status:               \plain\cf1\fs18 0x00000000
\plain\cf1\fs18 \par   \plain\cf3\fs18 Packet Length:        \plain\cf1\fs18 647
\plain\cf1\fs18 \par   \plain\cf3\fs18 Timestamp:            \plain\cf1\fs18 10:19:29.182980000 12/09/2010
\plain\cf1\fs18 \par \plain\ul\b\cf4\fs18 Ethernet Header
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Destination:          \plain\cf1\fs18 00:24:1D:EA:CB:C8  \plain\cf1\fs18 [0-5]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Source:               \plain\cf1\fs18 D8:5D:4C:76:39:2A  \plain\cf1\fs18 [6-11]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Protocol Type:        \plain\cf1\fs18 0x0800  \plain\i\cf7\fs16 IP  \plain\cf1\fs18 [12-13]
\plain\cf1\fs18 \par \plain\ul\b\cf4\fs18 IP Header - Internet Protocol Datagram
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Version:              \plain\cf1\fs18 4  \plain\cf1\fs18 [14 Mask 0xF0]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Header Length:        \plain\cf1\fs18 5  \plain\i\cf7\fs16 (\plain\i\cf7\fs16 20\plain\i\cf7\fs16  bytes)  \plain\cf1\fs18 [14 Mask 0x0F]
\plain\cf1\fs18 \par   Differentiated Services:\plain\cf1\fs18 %00000000  \plain\cf1\fs18 [15]
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 0000 00.. Default
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 .... ..00 Not-ECT
\plain\cf1\fs18 \par 
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Total Length:         \plain\cf1\fs18 629  \plain\cf1\fs18 [16-17]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Identifier:           \plain\cf1\fs18 7246  \plain\cf1\fs18 [18-19]
\plain\cf1\fs18 \par   Fragmentation Flags:  \plain\cf1\fs18 %010  \plain\cf1\fs18 [20 Mask 0xE0]
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 0.. Reserved
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 .1. Do Not Fragment
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 ..0 Last Fragment
\plain\cf1\fs18 \par 
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Fragment Offset:      \plain\cf1\fs18 0  \plain\i\cf7\fs16 (\plain\i\cf7\fs16 0\plain\i\cf7\fs16  bytes)  \plain\cf1\fs18 [20-21 Mask 0x1FFF]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Time To Live:         \plain\cf1\fs18 111  \plain\cf1\fs18 [22]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Protocol:             \plain\cf1\fs18 6  \plain\i\cf7\fs16 TCP - Transmission Control Protocol  \plain\cf1\fs18 [23]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Header Checksum:      \plain\cf1\fs18 0x2E76  \plain\cf1\fs18 [24-25]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Source IP Address:    \plain\cf1\fs18 221.176.31.1  \plain\cf1\fs18 [26-29]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Dest. IP Address:     \plain\cf1\fs18 192.168.1.101  \plain\cf1\fs18 [30-33]
\plain\cf1\fs18 \par \plain\ul\b\cf4\fs18 TCP - Transport Control Protocol
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Source Port:          \plain\cf1\fs18 8080  \plain\cf1\fs18 [34-35]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Destination Port:     \plain\cf1\fs18 2839  \plain\cf1\fs18 [36-37]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Sequence Number:      \plain\cf1\fs18 3883077832  \plain\cf1\fs18 [38-41]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Ack Number:           \plain\cf1\fs18 4284559526  \plain\cf1\fs18 [42-45]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 TCP Offset:           \plain\cf1\fs18 8  \plain\i\cf7\fs16 (\plain\i\cf7\fs16 32\plain\i\cf7\fs16  bytes)  \plain\cf1\fs18 [46 Mask 0xF0]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Reserved:             \plain\cf1\fs18 %0000  \plain\cf1\fs18 [46 Mask 0x0F]
\plain\cf1\fs18 \par   TCP Flags:            \plain\cf1\fs18 %00011000  \plain\i\cf7\fs16 .\plain\i\cf7\fs16 .\plain\i\cf7\fs16 .\plain\i\cf7\fs16 A\plain\i\cf7\fs16 P\plain\i\cf7\fs16 .\plain\i\cf7\fs16 .\plain\i\cf7\fs16 .  \plain\cf1\fs18 [47]
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 0... .... (No Congestion Window Reduction)
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 .0.. .... (No ECN-Echo)
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 ..0. .... (No Urgent pointer)
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 ...1 .... Ack
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 .... 1... Push
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 .... .0.. (No Reset)
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 .... ..0. (No SYN)
\plain\cf1\fs18 \par                         \plain\i\cf7\fs16 .... ...0 (No FIN)
\plain\cf1\fs18 \par 
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Window:               \plain\cf1\fs18 64418  \plain\cf1\fs18 [48-49]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 TCP Checksum:         \plain\cf1\fs18 0xC7EB  \plain\cf1\fs18 [50-51]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Urgent Pointer:       \plain\cf1\fs18 0  \plain\cf1\fs18 [52-53]
\plain\cf1\fs18 \par \plain\cf4\fs16 TCP Options:
\plain\cf1\fs18 \par   Option Type:          \plain\cf1\fs18 1  \plain\i\cf7\fs16 No Operation  \plain\cf1\fs18 [54]
\plain\cf1\fs18 \par 
\plain\cf1\fs18 \par   Option Type:          \plain\cf1\fs18 1  \plain\i\cf7\fs16 No Operation  \plain\cf1\fs18 [55]
\plain\cf1\fs18 \par 
\plain\cf1\fs18 \par   Option Type:          \plain\cf1\fs18 8  \plain\i\cf7\fs16 Timestamp  \plain\cf1\fs18 [56]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Length:               \plain\cf1\fs18 10  \plain\cf1\fs18 [57]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 TS Value:             \plain\cf1\fs18 0x06EBB241 08:15:09.889  \plain\cf1\fs18 [58-61]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Echo Reply:           \plain\cf1\fs18 0x00010507  \plain\cf1\fs18 [62-65]
\plain\cf1\fs18 \par 
\plain\cf1\fs18 \par 
\plain\cf1\fs18 \par \plain\ul\b\cf4\fs18 HTTP - Hyper Text Transfer Protocol
\plain\cf1\fs18 \par   \plain\i\cf7\fs16 Continuation of existing HTTP stream
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line  \plain\b\cf6\fs18 1\plain\b\cf6\fs18 :              \plain\cf1\fs18 M 776849541 SIP-C/4.0\plain\i\cf7\fs16 <CR>\plain\i\cf7\fs16 <LF>  \plain\cf1\fs18 [66-86]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line  \plain\b\cf6\fs18 2\plain\b\cf6\fs18 :              \plain\cf1\fs18 F: sip:10000@fetion.com.cn;p=100\plain\i\cf7\fs16 <CR>\plain\i\cf7\fs16 <LF>  \plain\cf1\fs18 [89-120]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line  \plain\b\cf6\fs18 3\plain\b\cf6\fs18 :              \plain\cf1\fs18 I: -2\plain\i\cf7\fs16 <CR>\plain\i\cf7\fs16 <LF>  \plain\cf1\fs18 [123-127]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line  \plain\b\cf6\fs18 4\plain\b\cf6\fs18 :              \plain\cf1\fs18 Q: 3 M\plain\i\cf7\fs16 <CR>\plain\i\cf7\fs16 <LF>  \plain\cf1\fs18 [130-135]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line  \plain\b\cf6\fs18 5\plain\b\cf6\fs18 :              \plain\cf1\fs18 C: text/xml\plain\i\cf7\fs16 <CR>\plain\i\cf7\fs16 <LF>  \plain\cf1\fs18 [138-148]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line  \plain\b\cf6\fs18 6\plain\b\cf6\fs18 :              \plain\cf1\fs18 N: system-message\plain\i\cf7\fs16 <CR>\plain\i\cf7\fs16 <LF>  \plain\cf1\fs18 [151-167]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line  \plain\b\cf6\fs18 7\plain\b\cf6\fs18 :              \plain\cf1\fs18 D: Thu, 09 Dec 2010 02:19:29 GMT\plain\i\cf7\fs16 <CR>\plain\i\cf7\fs16 <LF>  \plain\cf1\fs18 [170-201]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line  \plain\b\cf6\fs18 8\plain\b\cf6\fs18 :              \plain\cf1\fs18 L: 429\plain\i\cf7\fs16 <CR>\plain\i\cf7\fs16 <LF>\plain\i\cf7\fs16 <CR>\plain\i\cf7\fs16 <LF>  \plain\cf1\fs18 [204-209]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line  \plain\b\cf6\fs18 9\plain\b\cf6\fs18 :              \plain\cf1\fs18 <msg id="2592" type="1" show-once="1">\plain\i\cf7\fs16 <LF>  \plain\cf1\fs18 [214-251]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Line  \plain\b\cf6\fs18 10\plain\b\cf6\fs18 :             \plain\cf1\fs18 <validity begin="12/9/2010 12:30:00 AM" end="12/9/2010 2:00:00 PM"/>\plain\i\cf7\fs16 <LF>  \plain\cf1\fs18 [253-320]
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 Binary Data:
\plain\cf1\fs18 \par   <content type="t  3C 63 6F 6E 74 65 6E 74 20 74 79 70 65 3D 22 74  \plain\cf1\fs18 [322-337]
\plain\cf1\fs18 \par   ext/plain">.....  65 78 74 2F 70 6C 61 69 6E 22 3E E9 A3 9E E4 BF  \plain\cf1\fs18 [338-353]
\plain\cf1\fs18 \par   ................  A1 E2 80 9C E4 B8 80 E9 94 AE E6 90 AC E5 AE B6  \plain\cf1\fs18 [354-369]
\plain\cf1\fs18 \par   ................  E2 80 9D E5 8A 9F E8 83 BD E4 B8 8A E7 BA BF EF  \plain\cf1\fs18 [370-385]
\plain\cf1\fs18 \par   ...........MSN..  BC 8C E8 BD BB E6 9D BE E5 B0 86 4D 53 4E E7 A9  \plain\cf1\fs18 [386-401]
\plain\cf1\fs18 \par   ................  BA E9 97 B4 E6 97 A5 E5 BF 97 E6 90 AC E5 88 B0  \plain\cf1\fs18 [402-417]
\plain\cf1\fs18 \par   ................  E9 A3 9E E4 BF A1 E7 A9 BA E9 97 B4 E3 80 82 E5  \plain\cf1\fs18 [418-433]
\plain\cf1\fs18 \par   ................  88 AB E5 86 8D E7 8A B9 E8 B1 AB EF BC 8C E5 BF  \plain\cf1\fs18 [434-449]
\plain\cf1\fs18 \par   ................  AB E6 9D A5 E8 AF 95 E8 AF 95 E5 90 A7 EF BC 81  \plain\cf1\fs18 [450-465]
\plain\cf1\fs18 \par   ................  E7 82 B9 E5 87 BB E6 9F A5 E7 9C 8B E8 AF A6 E6  \plain\cf1\fs18 [466-481]
\plain\cf1\fs18 \par   ..</content>.<ur  83 85 3C 2F 63 6F 6E 74 65 6E 74 3E 0A 3C 75 72  \plain\cf1\fs18 [482-497]
\plain\cf1\fs18 \par   l style="auto:0;  6C 20 73 74 79 6C 65 3D 22 61 75 74 6F 3A 30 3B  \plain\cf1\fs18 [498-513]
\plain\cf1\fs18 \par   ">http://space.f  22 3E 68 74 74 70 3A 2F 2F 73 70 61 63 65 2E 66  \plain\cf1\fs18 [514-529]
\plain\cf1\fs18 \par   eixin.10086.cn/m  65 69 78 69 6E 2E 31 30 30 38 36 2E 63 6E 2F 6D  \plain\cf1\fs18 [530-545]
\plain\cf1\fs18 \par   sn?utm_source=hu  73 6E 3F 75 74 6D 5F 73 6F 75 72 63 65 3D 68 75  \plain\cf1\fs18 [546-561]
\plain\cf1\fs18 \par   odong&amp;utm_me  6F 64 6F 6E 67 26 61 6D 70 3B 75 74 6D 5F 6D 65  \plain\cf1\fs18 [562-577]
\plain\cf1\fs18 \par   dium=qw1&amp;utm  64 69 75 6D 3D 71 77 31 26 61 6D 70 3B 75 74 6D  \plain\cf1\fs18 [578-593]
\plain\cf1\fs18 \par   _campaign=xtxx&a  5F 63 61 6D 70 61 69 67 6E 3D 78 74 78 78 26 61  \plain\cf1\fs18 [594-609]
\plain\cf1\fs18 \par   mp;c=[c:m161.com  6D 70 3B 63 3D 5B 63 3A 6D 31 36 31 2E 63 6F 6D  \plain\cf1\fs18 [610-625]
\plain\cf1\fs18 \par   .cn]</url>.</msg  2E 63 6E 5D 3C 2F 75 72 6C 3E 0A 3C 2F 6D 73 67  \plain\cf1\fs18 [626-641]
\plain\cf1\fs18 \par   >                 3E  \plain\cf1\fs18 [642]
\plain\cf1\fs18 \par \plain\ul\b\cf4\fs18 FCS - Frame Check Sequence
\plain\cf1\fs18 \par   \plain\b\cf6\fs18 FCS:                  \plain\cf1\fs18 0xAF5F0CCD  \plain\i\cf7\fs16 Calculated} 